Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: 1F0iRhbOmmty1XY+u0iQ/JKcFiZDF8aEgLSQmAbANKo=
Subject key identifier: C4:B6:7B:31:99:4B:99:A7:E5:8D:35:DF:F0:98:7F:B4:27:4A:CC:7E
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 01975E01603BC76AE11B06FE37709B738BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0A96
Signing time: Wed 11 Jun 2025 08:00:37 +0000
Manifest this update: Wed 11 Jun 2025 08:00:37 +0000
Manifest next update: Thu 12 Jun 2025 08:00:37 +0000
Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: Yg8QwoNigzguCBU6cXHsCBYmfJTZpfP4vsk2xV0onS0=)
2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:60:3b:c7:6a:e1:1b:06:fe:37:70:9b:73:8b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Jun 11 08:00:37 2025 GMT
Not After : Jun 12 08:00:37 2025 GMT
Subject: CN=c4b67b31994b99a7e58d35dff0987fb4274acc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:18:49:da:a5:ad:99:48:31:9f:33:a8:8b:
83:b1:20:b5:23:f1:46:1c:2f:bb:de:3c:43:64:d4:
1d:8f:34:bd:ad:9d:2b:70:ae:59:77:1c:10:89:1f:
56:d3:25:ad:24:3a:5c:25:46:05:83:77:31:6f:16:
d2:c9:2e:76:bd:a9:58:23:a3:3a:fe:7c:a6:35:99:
72:2c:71:51:04:cf:8a:a5:32:9e:af:8c:42:92:fa:
0b:51:34:f8:32:68:fc:77:8d:53:80:31:4a:40:da:
a6:eb:9e:94:fd:91:ff:cd:85:54:a1:c0:b3:ab:94:
07:90:e3:61:b7:43:36:68:93:11:ae:44:70:3e:3f:
85:f7:60:b5:3b:b3:a5:00:a3:1b:26:44:e8:bd:18:
ba:3a:9e:1b:e9:99:02:85:57:a7:53:7d:1e:9c:f6:
55:bd:9f:ec:14:bf:f9:42:0c:e7:10:9f:20:ec:1b:
39:67:bc:8b:87:e8:4d:a8:ae:03:57:70:70:51:52:
fc:5d:d6:5f:dd:94:83:32:41:0a:ef:39:4f:17:d9:
f5:7c:97:2f:1b:ed:83:8b:24:31:3e:4b:91:da:5d:
a3:8c:2f:a1:a5:91:01:08:9c:e1:56:6b:eb:3e:80:
ea:c4:c8:d7:c1:e4:c2:b2:fc:64:35:52:26:3a:b3:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B6:7B:31:99:4B:99:A7:E5:8D:35:DF:F0:98:7F:B4:27:4A:CC:7E
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d6:ba:6b:0c:0c:d9:19:77:ed:c5:66:76:9d:ec:58:74:c6:
e7:3b:e4:fe:95:10:9b:c9:ed:c3:bd:c9:64:75:f6:19:fe:f8:
b6:73:03:ba:f2:10:86:d4:b8:49:9a:d4:64:fc:83:ef:bb:b3:
fc:30:91:e4:77:81:e2:ef:2f:10:69:c6:09:8e:36:be:f3:4e:
dd:0e:e9:b1:16:6b:98:8b:57:d0:57:09:68:5c:41:e4:51:0a:
29:0b:e9:40:90:18:73:1d:82:6f:26:d5:c9:b6:30:1e:b3:f6:
4f:32:46:03:8e:3d:ba:25:85:d4:32:2b:26:e2:4e:38:45:d3:
8b:b0:a0:28:1c:4b:8e:de:3c:22:b1:ac:93:1c:e3:21:f2:78:
5a:7e:db:a9:2f:3b:bf:7e:fa:fa:ef:78:dd:77:47:da:ba:5b:
7e:91:1e:cd:87:ff:6d:a7:9f:a0:0c:a0:3e:06:0e:ed:92:4f:
0c:b0:00:73:49:04:c6:33:9d:ad:d3:30:e8:25:ea:20:79:0e:
04:3b:87:ec:7c:63:20:04:b8:53:6f:89:7f:c1:07:fa:67:2f:
0a:c6:9e:50:34:ef:ae:15:03:81:d0:46:db:21:7c:f7:c3:33:
b2:23:2d:30:82:9e:9e:13:07:05:d7:c1:a5:bd:8b:e9:b7:62:
d1:c1:b5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:00:28 2025 by rpki-client